
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier: tLIshRi7eKXuNvfy9349eHSyg6nRFxbIUQWown0iG0U=
Subject key identifier: 0E:6A:23:BD:2A:47:9D:5B:0C:C1:D5:54:85:D5:05:73:D3:FA:97:E2
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial: 02FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number: 02EB
Signing time: Tue 01 Sep 2026 01:09:13 +0000
Manifest this update: Tue 01 Sep 2026 01:09:12 +0000
Manifest next update: Tue 08 Sep 2026 01:09:12 +0000
Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: OpRjMvFTpGx45MpPwptkrwhkg1ai/4FmHIxHh43RnGc=)
2: 99E52804462E11ED90035452C4F9AE02.roa (hash: qcEi6yFXe14vxwDIXMsWeAcEI41V5KEYbNBlQcRMfIk=)
3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 3q66unEtiXx6jKcOQRNMynBbEHvMb38v7KWWr1AaGpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 01:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Validity
Not Before: Sep 1 01:09:12 2026 GMT
Not After : Sep 8 01:09:12 2026 GMT
Subject: CN=6a9625b8-2a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:d5:ad:22:0a:4d:44:4b:09:13:61:78:db:
b0:c8:c3:49:50:4c:1d:14:14:ce:b0:42:0f:ef:da:
39:9b:8d:6c:71:eb:b4:17:f6:7c:84:d0:b3:81:03:
e3:dc:6a:26:a9:f0:33:9e:b0:15:d7:1f:d0:12:c5:
36:f5:a8:d6:9b:a3:aa:9b:57:73:66:cc:42:c5:20:
a8:22:b2:e1:26:94:31:c6:b3:5d:2a:06:11:84:ab:
03:89:69:2f:37:01:53:8c:17:9f:2e:ae:88:c0:b4:
22:f8:07:3f:f8:6b:30:ed:1a:64:4d:a9:1f:65:eb:
89:05:a8:4c:a5:b3:a9:1a:a7:fb:93:0e:6b:2b:c6:
e3:4d:ae:85:d9:30:12:b7:37:75:04:c1:4d:29:78:
91:9e:7a:3e:cf:27:38:3d:3d:4f:96:31:d6:fa:e1:
af:00:45:43:8b:8e:cb:76:3c:5f:f1:4c:15:93:74:
14:4c:7a:78:91:57:e7:ad:97:ff:29:28:8b:e2:c7:
15:84:3e:14:7c:15:ad:37:2a:54:ef:2a:58:88:70:
29:fe:3c:58:55:ad:df:81:b9:2a:68:72:39:8b:1c:
25:c0:9f:cb:73:ec:8a:40:cb:a5:06:e9:95:41:07:
56:b5:81:dc:c9:c5:3d:6d:7b:cc:19:44:2b:34:91:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:23:BD:2A:47:9D:5B:0C:C1:D5:54:85:D5:05:73:D3:FA:97:E2
X509v3 Authority Key Identifier:
keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:9f:04:5b:35:b3:09:af:94:05:68:30:e4:b9:d0:4e:39:7d:
1a:c3:f4:01:86:b8:ca:62:96:b3:be:7c:cd:7f:2f:5e:85:a8:
60:72:67:d9:24:12:58:60:f8:91:54:ca:33:22:7c:41:97:53:
3c:ca:b9:2b:c0:6c:ed:17:72:8f:d8:a9:5e:1f:1c:67:7a:a7:
73:56:f8:42:ca:86:18:d7:54:c5:a4:6e:45:db:2d:d3:17:65:
3e:09:44:31:83:b2:02:00:02:5b:72:2e:9f:aa:2a:a3:dd:7c:
12:2b:3e:ec:a7:6f:0c:11:61:c5:25:f8:92:04:7e:c9:af:b0:
ad:9f:65:e3:16:a7:65:00:df:c6:87:90:c0:63:13:47:f1:06:
4a:36:7d:27:ea:12:6b:96:4b:b3:46:5f:bb:f4:74:30:38:94:
e4:17:7b:ea:26:9e:40:cc:f1:b3:f4:6f:a6:6e:0b:28:86:e2:
b6:56:03:48:39:91:3a:ef:e6:be:7f:22:ed:4b:66:bb:b3:d5:
ef:92:94:d0:18:3b:ef:d9:19:bb:0b:ce:8f:1b:97:39:03:12:
be:b3:83:9f:de:5c:9b:d8:23:6e:63:5e:f8:5b:c5:49:fe:11:
b9:ed:c5:03:01:66:80:5d:86:d9:fb:f6:5a:46:ce:a1:1d:dd:
d3:36:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:10:20 2026 by rpki-client